Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS6079.roa
File: AS6079.roa (raw, json)
Hash identifier: BP2ZBDOgo9wjq9VMNWjsf8gVYs8fou6IEuOMS146NR8=
Subject key identifier: 25:81:C1:91:E3:09:CD:50:BC:31:56:9E:80:56:12:7D:C7:F1:40:B9
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 45599956E26083F753D37A3023D0F7FFD184C998
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS6079.roa
Signing time: Tue 26 May 2026 16:00:26 +0000
ROA not before: Tue 26 May 2026 15:55:26 +0000
ROA not after: Tue 25 May 2027 16:00:26 +0000
asID: 6079
IP address blocks: 143.20.186.0/24 maxlen: 24
143.20.190.0/24 maxlen: 24
143.20.198.0/24 maxlen: 24
143.20.211.0/24 maxlen: 24
143.20.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 21:46:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:59:99:56:e2:60:83:f7:53:d3:7a:30:23:d0:f7:ff:d1:84:c9:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: May 26 15:55:26 2026 GMT
Not After : May 25 16:00:26 2027 GMT
Subject: CN=2581C191E309CD50BC31569E8056127DC7F140B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:79:87:d3:b2:9d:a0:1d:5d:43:49:41:4e:54:
5c:bf:c1:fc:f9:9c:b3:3b:fd:2c:a2:43:d7:46:8f:
27:74:5a:af:30:20:aa:d7:c8:6e:af:0a:fc:d3:1a:
27:f6:9a:6b:28:1f:51:59:b5:59:79:5d:0c:6b:67:
fe:1d:8e:20:9b:67:3d:87:a8:e7:d4:73:94:ff:f8:
0b:f3:d9:5f:8a:4e:75:7e:9d:92:12:ba:91:94:52:
4f:d0:db:a7:54:4d:86:df:0e:0f:7b:fd:be:88:78:
01:04:20:2d:be:26:86:4a:c5:b5:20:e8:69:6c:1b:
0a:65:a4:30:a5:ed:14:64:8a:20:84:a9:a4:c2:c2:
00:d1:d7:02:52:71:73:b3:dc:e7:33:86:08:13:ab:
09:c5:75:5b:9e:df:b7:13:c5:ec:8f:fb:c0:bd:dd:
e0:96:c7:0b:9f:92:ec:ef:cd:43:30:83:93:41:83:
67:73:d7:5d:6d:0a:52:dc:38:1a:b8:3a:91:da:78:
e0:64:c3:9c:dd:fa:3a:58:55:22:63:7c:49:7b:d1:
53:df:43:6c:db:0a:3d:b8:22:4d:8e:37:5b:53:ce:
ac:b2:f3:5f:54:00:5d:13:65:86:69:0c:f6:07:69:
b8:83:0f:15:d1:e7:76:54:87:fd:f8:03:33:22:6e:
76:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:81:C1:91:E3:09:CD:50:BC:31:56:9E:80:56:12:7D:C7:F1:40:B9
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS6079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.186.0/24
143.20.190.0/24
143.20.198.0/24
143.20.211.0/24
143.20.232.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:ed:0c:56:56:15:95:11:fa:6a:45:f4:b8:e2:59:15:ec:40:
c1:49:8e:31:03:1e:9a:ce:21:e7:78:78:e7:32:b3:12:58:07:
a6:f4:56:05:79:87:a8:fd:e2:89:9d:ca:a8:fd:dc:c5:00:71:
f3:c5:a3:3d:7b:e6:83:05:3d:8a:5e:4e:2e:a7:8f:ab:2b:dc:
e2:13:d6:25:cf:2f:1b:84:b5:f3:dc:3f:29:dc:a4:3c:95:dc:
0b:b0:ba:d4:ed:f0:76:52:30:07:ec:88:f0:fe:fc:73:fe:2b:
9d:0f:bc:f1:ff:62:ef:e9:a8:77:cd:15:12:d0:fd:5c:60:6a:
22:c7:12:64:35:cb:5f:45:ff:27:d9:e2:02:5a:59:13:69:cc:
51:4b:5d:f1:d4:b8:ff:9f:65:bd:a0:eb:57:02:7b:b2:31:ab:
72:7f:08:a9:b5:71:9b:32:f0:64:bc:6b:49:2d:a2:d7:60:f5:
ae:4f:e5:6d:96:b8:54:ee:19:fe:76:ef:bb:7a:a6:70:09:30:
ec:53:ef:e9:a0:08:e1:29:09:63:d6:2d:df:21:b9:d5:b8:b1:
98:12:3f:f7:f4:14:f2:71:68:3b:10:3c:1c:57:45:ba:9f:d2:
36:cb:73:78:a4:70:8c:8a:d9:54:a3:35:b0:67:b2:d5:4f:a0:
b3:8d:b3:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIURVmZVuJgg/dT03owI9D3/9GEyZgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhjMTRlYzAyYWRiZjA4MzEzOGVkZGQ0Nzg3MTE3NmRk
ZWI5M2Q5ZDAeFw0yNjA1MjYxNTU1MjZaFw0yNzA1MjUxNjAwMjZaMDMxMTAvBgNV
BAMTKDI1ODFDMTkxRTMwOUNENTBCQzMxNTY5RTgwNTYxMjdEQzdGMTQwQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHeYfTsp2gHV1DSUFOVFy/wfz5
nLM7/SyiQ9dGjyd0Wq8wIKrXyG6vCvzTGif2mmsoH1FZtVl5XQxrZ/4djiCbZz2H
qOfUc5T/+Avz2V+KTnV+nZISupGUUk/Q26dUTYbfDg97/b6IeAEEIC2+JoZKxbUg
6GlsGwplpDCl7RRkiiCEqaTCwgDR1wJScXOz3OczhggTqwnFdVue37cTxeyP+8C9
3eCWxwufkuzvzUMwg5NBg2dz111tClLcOBq4OpHaeOBkw5zd+jpYVSJjfEl70VPf
Q2zbCj24Ik2ON1tTzqyy819UAF0TZYZpDPYHabiDDxXR53ZUh/34AzMibnY5AgMB
AAGjggIgMIICHDAdBgNVHQ4EFgQUJYHBkeMJzVC8MVaegFYSfcfxQLkwHwYDVR0j
BBgwFoAUiMFOwCrb8IMTjt3UeHEXbd65PZ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzQwOWQ3YjItZWU2NC00OWYxLWFkODEtOGU0YTEwN2Q2
MmUwLzAvODhDMTRFQzAyQURCRjA4MzEzOEVEREQ0Nzg3MTE3NkRERUI5M0Q5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2lNRk93Q3JiOElNVGp0M1VlSEVYYmQ2
NVBaMC5jZXIweQYIKwYBBQUHAQsEbTBrMGkGCCsGAQUFBzALhl1yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2M0MDlkN2IyLWVlNjQt
NDlmMS1hZDgxLThlNGExMDdkNjJlMC8wL0FTNjA3OS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjA3BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAI8UugME
AI8UvgMEAI8UxgMEAI8U0wMEAI8U6DANBgkqhkiG9w0BAQsFAAOCAQEAoe0MVlYV
lRH6akX0uOJZFexAwUmOMQMems4h53h45zKzElgHpvRWBXmHqP3iiZ3KqP3cxQBx
88WjPXvmgwU9il5OLqePqyvc4hPWJc8vG4S189w/KdykPJXcC7C61O3wdlIwB+yI
8P78c/4rnQ+88f9i7+mod80VEtD9XGBqIscSZDXLX0X/J9niAlpZE2nMUUtd8dS4
/59lvaDrVwJ7sjGrcn8IqbVxmzLwZLxrSS2i12D1rk/lbZa4VO4Z/nbvu3qmcAkw
7FPv6aAI4SkJY9Yt3yG51bixmBI/9/QU8nFoOxA8HFdFup/SNstzeKRwjIrZVKM1
sGey1U+gs42zMQ==
-----END CERTIFICATE-----
Generated at Thu Jun 4 11:08:36 2026 by rpki-client